PT-2022-18627 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 2.1.96 Description: The issue is related to improper access control in FactoryCamera, allowing an attacker to access a file with system privilege. Recommendations: For versions prior to 2.1.96, update to versio...

PrivateBin 跨站脚本漏洞

PrivateBin is a minimalist open source online pastebin. PrivateBin versions prior to 1.4.0 have a cross-site scripting vulnerability , the vulnerability stems from the SVG can contain JavaScript. attackers use this vulnerability to execute code...

tableExport.jquery.plugin 跨站脚本漏洞

tableExport.jquery.plugin is a jQuery plugin. Used to export html tables to JSON, XML, CSV, TSV, TXT, SQL, Word, Excel, PNG and PDF. A cross-site scripting vulnerability exists in the GitHub repository hhurz/tableexport.jquery.plugin versions prior to 1.25.0, which originates from the transfer of...

PT-2022-2944 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions prior to 12.0.1 Description: The issue is related to an out-of-bounds write that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a victim must op...

CVE-2022-0935

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

CVE-2022-0454

Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Samsung portable SSD T5 PC代码问题漏洞

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

CVE-2022-23700

A local unauthorized read access to files vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...

CVE-2022-1168

There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1...

CVE-2022-1167

There are unauthenticated reflected Cross-Site Scripting XSS vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters...

Twisted 环境问题漏洞

Twisted is an event-driven open source web engine written in the Python language. Twisted suffers from an environmental issue vulnerability that stems from the fact that prior to version 22.4.0rc1, the Twisted Web HTTP 1.1 server was located in the Twisted. Web HTTP module, which parses several...

Eyecix Careerfy跨站脚本漏洞

Eyecix Careerfy is a WordPress theme from Eyecix Pakistan.A cross-site scripting vulnerability exists in versions prior to Eyecix Careerfy 3.9.0, which stems from the program's lack of data validation filtering of user-supplied and output data. An attacker could exploit the vulnerability to execu...

phpIPAM 安全漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in versions prior to phpipam 1.4.6 that stems from incorrect authorization in the application...

CVE-2022-28378

Craft CMS before 3.7.29 allows XSS...

Schneider Electric ConneXium Tofino Firewall和Schneider Electric Belden Tofino Xenon Security Appliance 信任管理问题漏洞

Schneider Electric ConneXium Tofino Firewall and Schneider Electric Belden Tofino Xenon Security Appliance are both products of Schneider Electric, a French company. The Schneider Electric ConneXium Tofino Firewall is a firewall appliance and the Schneider Electric Belden Tofino Xenon Security...

PT-2022-18977 · Dompdf · Dompdf

Name of the Vulnerable Software and Affected Versions: Dompdf versions prior to 1.2.1 Description: The issue allows remote code execution via a .php file in the src field of an @font-face Cascading Style Sheets CSS statement within an HTML input file. This is a general information about the issue...

mruby 代码问题漏洞

mruby is a lightweight implementation of the Ruby language. A code issue vulnerability exists in versions prior to mruby 3.2 that can cause the mruby interpreter to crash, which can affect system availability...

CVE-2022-1098

Delta Electronics DIAEnergie all versions prior to 1.8.02.004 are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privileges...

CVE-2021-32957

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...

CVE-2022-21235

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection...